This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft File: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json) Hash identifier: 9hGVxJG5XKnsBwweYwI9OZ0RRcDYjtKMWPNnx0IBVEc= Subject key identifier: 1F:4D:AA:21:5B:8E:D3:06:71:BA:39:77:E5:38:C4:F2:8F:A8:A9:A9 Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae Certificate serial: 019BF72D0F17253011B84226EA88F72B794B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft Manifest number: 0CAB Signing time: Sun 25 Jan 2026 22:01:23 +0000 Manifest this update: Sun 25 Jan 2026 22:01:23 +0000 Manifest next update: Mon 26 Jan 2026 22:01:23 +0000 Files and hashes: 1: khVNUt72gqEtLTFHrFGFydtaf9g.roa (hash: bNy/lOF0EYLu7hmaQcENeHKBy5qTO7PagdNW8TUDKr4=) 2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: cOY9AIUf+bvEn9GMnIY0f7N4u0PNgzq/shficOFRVzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:0f:17:25:30:11:b8:42:26:ea:88:f7:2b:79:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae Validity Not Before: Jan 25 22:01:23 2026 GMT Not After : Jan 26 22:01:23 2026 GMT Subject: CN=1f4daa215b8ed30671ba3977e538c4f28fa8a9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:c1:39:b5:5d:71:f7:93:d4:59:14:35:73: 55:55:f9:6b:77:b6:46:bd:06:e2:5b:73:96:6d:b3: aa:9a:70:1f:75:fd:d3:4d:c4:6a:ec:aa:36:6f:e7: 41:66:02:2a:15:23:16:6a:02:24:48:c1:ab:98:27: 4a:68:16:38:ba:b5:7a:9b:97:f6:b0:fd:b5:73:78: 87:0d:e2:14:49:be:f2:29:f7:44:56:ff:e1:55:1f: 33:59:5d:07:9a:68:b1:14:28:82:85:70:f8:5b:9a: df:4b:98:8e:48:63:b7:f6:9a:7c:98:ed:75:a0:54: db:e0:9d:84:69:f9:f0:25:a7:c3:f0:84:48:55:34: cb:a6:c7:7d:eb:bf:aa:34:52:8d:64:cb:c2:08:23: 15:f2:ee:40:75:b5:4f:4e:e1:00:df:64:65:e1:0c: 1d:ad:fc:4d:9a:6d:1a:06:8c:34:0f:42:8b:08:bf: f6:9b:95:b2:35:70:ff:d7:99:ad:0f:0f:0d:be:7d: 04:aa:21:67:89:4f:2a:eb:76:b2:ac:6f:bf:9c:d2: 7c:1f:52:fe:6e:fe:c2:fe:70:66:1a:02:53:89:c5: b1:07:1e:d5:13:27:40:29:9f:5d:df:a4:49:96:20: 99:ad:a7:88:be:3b:c9:69:e8:7d:4c:e8:8b:df:d7: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4D:AA:21:5B:8E:D3:06:71:BA:39:77:E5:38:C4:F2:8F:A8:A9:A9 X509v3 Authority Key Identifier: keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ba:6a:2f:8e:4e:0f:21:36:0c:bb:5f:40:a8:b8:03:4d:64: 83:f0:03:23:05:f2:83:63:aa:68:d2:76:81:a7:d5:70:29:c8: 44:eb:22:a2:d4:14:5b:01:95:a6:b3:22:e6:e2:e3:08:a8:6d: b2:89:3e:c9:56:4c:02:38:6b:dd:47:85:fb:92:c6:34:a7:cc: ba:54:4c:6a:a7:25:da:aa:e9:0c:14:0a:da:03:30:ff:f2:45: f6:51:55:5c:40:6c:bf:38:c7:73:34:69:ac:48:4c:f9:3e:02: 1f:3b:43:20:3a:af:3c:65:d1:dd:c6:db:76:6c:54:56:6e:f8: 27:95:55:7b:9d:52:98:5e:83:7b:ec:93:7e:91:af:a9:a1:01: 74:ec:2f:69:aa:9c:7e:ea:c1:09:7b:6a:cc:b8:e1:13:37:30: 03:23:30:b6:e0:aa:0e:80:ac:d8:0f:ed:3c:9a:5b:90:6f:41: c9:81:28:d8:bb:17:9f:d4:5f:79:4b:bf:30:40:15:af:28:dd: 60:c9:ec:8c:11:b8:89:c8:f2:dc:e0:41:e0:cf:ec:0b:c5:e5: e3:24:20:2e:02:d8:36:40:2e:41:fa:a6:c9:a6:91:50:b3:bd: bd:fc:80:fe:32:7d:3a:69:b4:53:d5:b9:50:9e:2f:10:2b:12: 8b:2f:b2:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LQ8XJTARuEIm6oj3K3lLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwY2FjOGQ1MjRhNWZlYzdmYzgzYTIzODMwZmJmOTIyNmE3 NjAxYWUwHhcNMjYwMTI1MjIwMTIzWhcNMjYwMTI2MjIwMTIzWjAzMTEwLwYDVQQD EygxZjRkYWEyMTViOGVkMzA2NzFiYTM5NzdlNTM4YzRmMjhmYThhOWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1fBObVdcfeT1FkUNXNVVflrd7ZG vQbiW3OWbbOqmnAfdf3TTcRq7Ko2b+dBZgIqFSMWagIkSMGrmCdKaBY4urV6m5f2 sP21c3iHDeIUSb7yKfdEVv/hVR8zWV0HmmixFCiChXD4W5rfS5iOSGO39pp8mO11 oFTb4J2EafnwJafD8IRIVTTLpsd967+qNFKNZMvCCCMV8u5AdbVPTuEA32Rl4Qwd rfxNmm0aBow0D0KLCL/2m5WyNXD/15mtDw8Nvn0EqiFniU8q63ayrG+/nNJ8H1L+ bv7C/nBmGgJTicWxBx7VEydAKZ9d36RJliCZraeIvjvJaeh9TOiL39d37wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9NqiFbjtMGcbo5d+U4xPKPqKmpMB8GA1UdIwQY MBaAFMDKyNUkpf7H/IOiODD7+SJqdgGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODIt NzY1NWM4OWYxNGQ2LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODItNzY1NWM4OWYxNGQ2 LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbpqL45O DyE2DLtfQKi4A01kg/ADIwXyg2OqaNJ2gafVcCnIROsiotQUWwGVprMi5uLjCKht sok+yVZMAjhr3UeF+5LGNKfMulRMaqcl2qrpDBQK2gMw//JF9lFVXEBsvzjHczRp rEhM+T4CHztDIDqvPGXR3cbbdmxUVm74J5VVe51SmF6De+yTfpGvqaEBdOwvaaqc furBCXtqzLjhEzcwAyMwtuCqDoCs2A/tPJpbkG9ByYEo2LsXn9RfeUu/MEAVryjd YMnsjBG4icjy3OBB4M/sC8Xl4yQgLgLYNkAuQfqmyaaRULO9vfyA/jJ9Omm0U9W5 UJ4vECsSiy+yaA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:38 2026 by rpki-client